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Amendments to the Claims 

1 . (currently amended) A PES cryptography engine for performing 
cryptographic operations on a data block ? the cryptography engine comprising: 

a key scheduler configured to provide keys for cryptographic operations; 

e xpansion logic configur e d to expand a first bit sequence having a first size to 
an expanded first bit s equenc e having a second size greater than th e first size, th e first 
bit s e qu e nc e corr e sponding to a right portion of an input bit s e qu e nce for th e current 
cryptographic round; 

eight bit-slice modules, each bit-slice module including: 

first circuitry configured to perform an exclusive OR (XOR) on the 
expanded afirst bit sequence and a portion of a k ey provided by the key scheduler to 
generate a third second b it sequence; 

a PES substitution box (SBox) configured to transform the second 
third bit sequence into a fourth third b it sequence; 

second circuitry configured to perform an exclusive OR (XOR) on the 
fourth third bit sequence and a left portion of fee an input bit sequence for the current 
cryptographic round to generate a fourth fifth bit sequence a 

wherein the fourth bit sequence is a right portion of an output bit 
sequence and a right portion of the input bit sequence is a left portion of the output bit 
sequence of a current PES round for the bit slide module ; 

permutation logic coupled to th e e xpansion logic and the second circuitry, the 
permutation logic configured to receive the fifth fourth bit sequence from each of the 
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eight bit-slice modules th e second circuitry and to perform a permutation ef on the 

received fourth bit sequences; and fifth bit s e qu e nce, 

expansion logic configured to generate a set of first bit sequences by 

expanding received bit sequences and to provide a first bit sequence to each bit slice 

module. 

wh e r e in th e fifth bit s e quence is a right portion of an output bit sequ e nce of a 
curr e nt cryptographic round . 

2.- 3. (canceled) 

4. (currently amended) The cryptography engine of claim 1 wherein each bit- 
slice module further comprising comprises two-level multiplexer circuitry, wherein a 
first level of the two-level multiplexer is configured to receive an inverse permutation 
of a first portion of the an initial input bit sequence and an inverse permutation of a 
second portion of the initial input bit sequence during an initial cryptographic round 
and aright the left p ortion of an the output bit sequence from a previous 
cryptographic round during a subsequent cryptographic round and wherein a second 
level of the two-level multiplexer is configured to receive the output of the first level 
and the right portion of the output bit sequence generated during the previous 
cryptographic round. 

5. (currently amended) The cryptography engine of claim 1, wherein the third 
and fourth bit sequences are 6 bits, the first bit sequence is less than 32 bits . 

6. (original) The cryptography engine of claim 1, wherein the first and second 
bit sequences are s e quence is four bits. 
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7 — 12. (canceled) 

13. (original) The cryptography engine of claim 1, wherein the key scheduler 
performs pipelined key scheduling logic. 

14. (original) The cryptography engine of claim 1, wherein the key scheduler 
comprises a plurality of stages. 

15. (original) The cryptography engine of claim 1, wherein the key scheduler 
comprises a determination stage. 

16. (original) The cryptography engine of claim 1, wherein the key scheduler 
comprises a shift stage. 

17. (original) The cryptography engine of claim 1, wherein the key scheduler 
comprises a propagation stage. 

1 8. (original) The cryptography engine of claim 1, wherein the key scheduler 
comprises a consumption stage. 

19. (previously presented) The cryptography engine of claim 1, wherein a first 
shift amount for a first key is identified in a determination stage using a first round 
counter value. 

20. (canceled) 

21. (currently amended) The cryptography engine of claim 4 ? wherein the two- 
level multiplexer is configured to swap [[a]] the left portion of the output bit sequence 
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of a previous cryptographic round with [[a]] the right portion of the output bit 

sequence of the previous cryptographic round, whereby the right portion of the input 

bit sequence of the previous cryptographic round becomes the left portion of an input 

bit sequence for the current cryptographic round and the fifth fourth b it sequence 

becomes a right portion of the input bit sequence for the current cryptographic round. 

22. (canceled) 

23. (currently amended) An integrated circuit layout associated with a PES 
cryptography engine for performing cryptographic operations on a data block, the 
integrated circuit layout providing information for configuring the PES cryptography 
engine, the integrated circuit layout comprising: 

a key scheduler configured to provide keys for cryptographic operations; 

expansion logic configured to expand a first bit sequ e nc e having a first size to 
an expanded first bit sequenc e having a second size gr e ater than the first size, the first 
bit sequenc e corresponding to a right portion of an input bit sequence for the current 
cryptographic round; 

eight bit-slice modules, each bit-slice module including: 

first circuitry configured to perform an exclusive OR (XOR) on the 
expanded a^first bit sequence and a portion of a key provided by the key scheduler to 
generate a third second b it sequence; 

a PES substitution box (SBox) configured to transform the second 
third bit sequence into a fourth third bit sequence; 
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second circuitry configured to perform an exclusive OR (XOR) on the 

fourth third b it sequence and a left portion of the an input bit sequence for the current 

cryptographic round to generate a fourth fifth bit sequence x 

wherein the fourth bit sequence is a right portion of an output bit 

sequence and a right portion of the input bit sequence is a left portion of the output bit 

sequence of a current PES round for the bit slide module ; 

permutation logic coupled to tho expansion logic and th e second circuitry, th e 
permutation logic configured to receive the fifth fourth b it sequence from each of the 
eight bit-slice modules th e second circuitry and to perform a permutation of on the 
received fourth bit sequences; and fifth bit sequ e nce. 

expansion logic configured to generate a set of first bit sequences by 
expanding received bit sequences and to provide a first bit sequence to each bit slice 
module. 

wherein th e fifth bit sequence is a right portion of an output bit s e quence of a 
current cryptographic round . 

24. - 25. (canceled) 

26. (currently amended) The integrated circuit layout of claim 23 wherein each 
bit-slice module further comprising comprises two-level multiplexer circuitry, 
wherein a first level of the two-level multiplexer is configured to receive an inverse 
permutation of a first portion of the an initial input bit sequence and an inverse 
permutation of a second portion of the initial input bit sequence during an initial 
cryptographic round and aright the left portion of an the output bit sequence from a 
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previous cryptographic round during a subsequent cryptographic round and wherein a 

second level of the two-level multiplexer is configured to receive the output of the 

first level and the right portion of the output bit sequence generated during the 

previous cryptographic round. 

27. (currently amended) The integrated circuit layout of claim 23, wherein the 
first and second bit sequences are sequ e nce is four bits. 

28. (currently amended) The integrated circuit layout of claim 27, wherein the 
third and fourth bit sequences are the expanded first bit s e quenc e is less than six bits. 

29. (previously presented) The integrated circuit layout of claim 23, wherein 
the key scheduler performs pipelined key scheduling logic. 

30. (previously presented) The integrated circuit layout of claim 23, wherein 
the key scheduler comprises a determination stage. 

31. (previously presented) The integrated circuit layout of claim 23, wherein 
the key scheduler comprises a shift stage. 

32. (previously presented) The integrated circuit layout of claim 23, wherein 
the key scheduler comprises a propagation stage. 

33. (previously presented) The integrated circuit layout of claim 23, wherein 
the key scheduler comprises a consumption stage. 
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34. (previously presented) The integrated circuit layout of claim 23, wherein a 
first shift amount for a first key is identified in a determination stage using a first 
round counter value. 

35. (canceled) 

36. (previously presented) The integrated circuit layout of claim 26, wherein 
the two-level multiplexer is configured to swap [[a]] the left portion of the output bit 
sequence of a previous cryptographic round with [[a]] the right portion of the output 
bit sequence of the previous cryptographic round, whereby the right portion of the 
input bit sequence of the previous cryptographic round becomes the left portion of an 
input bit sequence for the current cryptographic round and the fifth fourth b it 
sequence becomes a right portion of the input bit sequence for the current 
cryptographic round. 

37. (canceled) 

38. (previously presented) The cryptography engine of claim 1, wherein the 
first circuitry comprises: 

a plurality of logic devices simulating an XOR operation for combining the 
key provided by the key scheduler with the expanded first bit sequence, the plurality 
of logic devices including a multiplexer receiving first and second input values and an 
OR logic combining an output value of the multiplexer with a third input value; 

wherein the first, second, and third input values are determined based on the 
key provided by the key scheduler and further based on a select value indicative of 
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whether a current cryptographic operation is to occur during an initial round of a 

particular series of rounds of cryptographic operations. 

39 -40. (canceled) 

41. (previously presented) The cryptographic engine of claim 4, wherein the 
first level comprises: 

a first two to one multiplexer, and 
a second two to one multiplexer; and 
wherein the second level includes: 

a third two to one multiplexer coupled to the first two to one 
multiplexer, and 

a fourth two to one multiplexer coupled to the second two to one 

multiplexer. 

42. (currently amended) The cryptographic engine of claim 1, wherein the 
expansion logic comprises: 

a first expansion logic block coupled to the first circuitry of a bit-slice module 
and configured to receive a first portion of an initial input sequence the first bit 
s e qu e nce ; and 

a second expansion logic block coupled to the second circuitry and to the first 
circuitry configured to receive permuted bit sequences from the permutation logic the 
fifth bit sequence from th e second circuitry . 
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43. (previously presented) The cryptographic engine of claim 1 ? further 

comprising: 

a first asynchronous FIFO configured to convert input blocks of a third size to 
blocks of a fourth size for cryptographic processing; and 

a second asynchronous FIFO configured to convert cryptographic output 
blocks of the fourth size to the third size for further processing. 



44. (canceled) 



